1. Who we are
Wielo Platform (Pty) Ltd (“Wielo”, “we”, “us”) is the Responsible Party for the personal information it processes. You can reach our Information Officer at privacy@wielo.co.za. Where a host collects a guest’s personal information to fulfil a booking, the host is the Responsible Party and Wielo acts as the host’s Operator (see Schedule A of the Terms of Service).
2. Information we collect
Information you give us (account details, listing content, banking and payout details, booking and enquiry details, messages, reviews, support requests); information we collect automatically (device and connection data, IP address, log and usage data, cookies); and information from third parties where you have authorised it. Please do not submit special personal information or children’s information.
3. How we use it, and our lawful basis
We use personal information to provide the Platform; process bookings, subscriptions and payments; enable host–guest communication; send transactional messages; prevent and investigate fraud and abuse; provide support and resolve disputes; comply with legal, tax and accounting obligations; and — with your consent — send product updates and enable optional analytics. Our POPIA bases include performance of a contract, compliance with a legal obligation, our legitimate interests balanced against your rights, and your consent where required.
4. Reviews and Looking-For requests
Reviews are associated with your account and the relevant booking so we can verify they are genuine (see our Review Disclosure). When you post a Looking-For request we process the details you share so hosts can respond, sharing only what is necessary (see our Looking-For Notice).
5. Sharing and disclosure
We share information between host and guest as needed to complete a booking; with our payment providers (Paystack, PayPal); with service providers who process on our behalf under contract; and with regulators or law enforcement where legally required. We may share information in a business transfer, subject to this policy. We do not sell personal information.
6. International transfers
Your personal information is stored outside South Africa. Our database and file storage are hosted in Frankfurt, Germany, and some service providers process personal information in other countries. POPIA §72 permits these transfers because the recipients are subject to laws or binding agreements that uphold principles substantially similar to POPIA, and our contracts require a comparable standard of protection.
7. Security and retention
We use reasonable, appropriate technical and organisational measures — encryption in transit, encrypted storage of sensitive fields, strict role-based access controls and regular review. We keep personal information for as long as your account is active and for a reasonable period afterwards to satisfy legal, tax, accounting and dispute-resolution requirements, after which it is deleted or de-identified.
8. Your rights
You have the right to access, correct or delete your personal information; object to processing; withdraw consent; not be subject to unsolicited electronic marketing; and lodge a complaint with the Information Regulator. You can request data export or deletion from your account settings.
9. Children, changes and complaints
The Platform is not intended for people under 18 and we do not knowingly collect their information. We may update this policy; material changes are communicated by email or in-app notice, and the version in force when you make a booking is recorded. For privacy questions or to exercise your rights, contact privacy@wielo.co.za. You may also lodge a complaint with the Information Regulator of South Africa.